solanamixer[.]app

The domain solanamixer.app is a confirmed phishing site engaged in brand impersonation targeting the Solana cryptocurrency platform. It presents itself as a mixing service under the name 'SolanaMixer' to deceive users into interacting with fraudulent cryptocurrency transactions. As of the latest verification, solanamixer.app has been taken offline, but it previously posed an elevated risk of financial loss to victims who may have engaged with the site.

Technical analysis reveals that solanamixer.app was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to the IP address 172.67.209.173, hosted by Cloudflare in the US. It appeared on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'SolanaMixer - #1 Solana Mixer | Anonymous SOL Mixing Service'. The site utilized technologies such as Bootstrap, Trustpilot, and Cloudflare Browser Insights. Gridinsoft assigned it a trust score of 0 out of 100.

Users who interacted with solanamixer.app should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered on the site, change passwords for associated accounts and enable two-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to assist in broader mitigation efforts.